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Top Stories 

• The former president of Lafayette Bank pleaded guilty May 7 in a Northampton County, 
Pennsylvania court to running a $10.13 million Ponzi scheme that defrauded 90 investors 
in several States. - Allentown Morning Call (See item 5) 

• The U.S. Department of Transportation issued an emergency order to rail road 
representatives May 7 ordering them to inform State emergency management officials 
about large shipments of crude oil being transported through their States, the amount being 
shipped, and the trains’ county-by-county routes. - Associated Press (See item 7) 

• New York- Presbyterian Hospital and Columbia University Medical Center in New York 
paid $4.8 million in a joint settlement with the U.S. Department of Health and Human 
Services May 7 over a 2010 privacy breach. - Associated Press (See item 17) 

• About 150 residents from roughly 18 apartment buildings in southeast Washington, D.C. 
lost water service for several hours May 7-8 after a 20-inch water main failed. - WTTG 5 
Washington, D.C. (See item 24) 




Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Reactors. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEALTH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Services 

• Transportation Systems 

• Information Technology 

• Communic ations 

• Commercial Facilities 
FEDERAL and STATE 

• Government Facilities 

• Emergency Services 



1 - 



Energy Sector 



1. May 8, Columbus Dispatch - (Ohio) Shale well leaks during drilling process, forcing 
evacuations in Morgan County. The U.S. Environmental Protection agency reported 
May 6 that 330 barrels of oil and water were collected after a Morgan County, Ohio 
PDC Energy of Colorado-owned shale well began leaking May 4 while it was being 
drilled, forcing the evacuation of nearby homes. Some of the drilling mud reached an 
unnamed creek near Beverly after a pocket of unexpected gas was encountered during 
drilling, causing an overpressurization and failure of the well head. 

Source: http://www.dispatch.com/content/stories/local/2014/05/07/Morgan-Countv- 
fracking-well-leaking-since-Sunday.html 

2. May 7, KMGH 7 Denver - (Colorado) 4-alarm fire at Martin Drake Power Plant 
initially ruled an accident. Investigators reported that an initial investigation 
determined a 4-alarm fire at the Martin Drake Power Plant in Colorado Springs May 5 
was the result of lubricating oil freely flowing and coming into contact with high 
temperature steam pipes resulting in the flash fire. The investigation is ongoing and 
may take several weeks to complete. 

Source: http://www.thedenverchannel.com/news/local-news/4-alarm-fire-at-martin- 
drake-power-plant-initially-ruled-an-accident 

For additional stories, see items 7 and 9 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. May 7, Chattanooga Times Free Press - (Alabama) TVA Browns Ferry nuclear 
reactor shuts down after pumps fail. The Unit 3 reactor at the Browns Ferry Nuclear 
Plant in Alabama shut down automatically May 6 after power was temporarily 
interrupted to two recirculation pumps that supply water to the reactor. The unit was 
placed on standby until an investigation can be completed. 

Source: http://timesfreepress.com/news/2014/may/07/tva-browns-ferrv-nuclear-reactor- 
shuts-down-after-/ 

4. May 7, Wilmington News Journal - (New Jersey) Salem reactor shutdown reported. 
A turbine-generator issue at the Salem/Hope Creek nuclear power complex in Lower 
Alloways Creek caused the automatic shutdown of the Salem Unit 1 reactor May 7. 

The incident was the third unplanned shutdown at the site in a month. 

Source: http://www.delawareonline.com/storv/news/local/2014/05/07/salem-reactor- 
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shutdown-reported/8802443/ 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

5. May 7, Allentown Morning Call - (National) Former bank president admits stealing 
millions in Ponzi scheme. The former president of Lafayette Bank pleaded guilty May 
7 in a Northampton County, Pennsylvania court to running a $10.13 million Ponzi 
scheme that defrauded 90 investors in several States. 

Source: http://www.mcall.com/news/breaking/mc-northampton-countv-ponzi-scheme- 
bank-president-20140507 ,0,5 167846.story 

6. May 7, U.S. Securities and Exchange Commission - (New York) SEC announces 
charges and asset freeze against hedge fund advisory firm distributing falsified 
performance results. The U.S. Securities and Exchange Commission filed fraud 
charges and announced an asset freeze May 7 against New York-based Aphelion Fund 
Management for allegedly misrepresenting the assets it manages in order to raise $1.5 
million from investors between 2013 and March 2014. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370541746247 

T Return to top ] 

Transportation Systems Sector 

7. May 8, Associated Press - (International) Feds issue emergency order on crude oil 
trains. The U.S. Department of Transportation (DOT) issued an emergency order to 
rail road representatives May 7 ordering them to inform State emergency management 
officials about large shipments of crude oil from the Bakken region of North Dakota, 
Montana, and Canada through their States, the amount being shipped, and the trains’ 
county-by-county routes. The DOT also issued a safety advisory urging shippers not to 
use older model tanks in shipments of crude oil. 

Source: http://www.dailvfreeman.com/201405Q8/feds-issue-emergency-order-on- 
crude-oil-trains 
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8. May 8, Riverside Press-Enterprise - (California) Hesperia: Lanes reopen after 
temporary closure at bridge fire site. All lanes of Interstate 15 in Hesperia reopened 
May 8 after they were closed May 7 at the new Ranchero Road interchange in order to 
repair asphalt damaged by a May 5 fire. 

Source: http://blog.pe.com/breaking-news/2014/05/08/hesperia-lanes-reopen-after- 
temporary-closure-at-bridge-fire-site/ 

9. May 7, Associated Press - (Colorado) Tanker truck spills oil in San Miguel County. 
About 8,000 gallons of oil were spilled when a semi-truck lost its brakes, went off the 
road, and rolled over on Highway 141 in San Miguel County, Colorado, May 7, 
causing the driver to be airlifted to a local hospital. 

Source: http://denver.cbslocal.com/2014/05/07/tanker-truck-spills-oil-in-san-miguel- 
county/ 

10. May 6, U.S. Environmental Protection Agency - (Delaware) EPA settlement with 
Ryder Truck rental protects soil and groundwater from contamination. Ryder 
Truck Rental Inc., agreed to pay $22,500 in a settlement with the U.S. Environmental 
Protection Agency May 6 for violating underground storage tank (UST) regulations at 
its Wilmington, Delaware facility after not conducting required leak detection measures 
for more than 6 months and failure to respond to a suspected fuel leak in a timely 
manner in 2009. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/e639884eb8a8elb685257cd00065521b7Qp 

enDocument 



11. May 6, CNN - (National) Airplane diverts after windshield cracks. A Delta Airlines 
flight from Atlanta to Los Angeles was forced to make an emergency landing in 
Albuquerque, New Mexico, May 3 after pressure at 38,000 feet caused one pane of the 
Boeing 767-300 aircraft’s windshield to arch, bubble, and then shatter, according to 
officials. 

Source: http://www.cnn.com/2014/05/06/travel/cracked-delta-windshield/index.html 
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Food and Agriculture Sector 

12. May 7, Food Safety News - (National) Microwave popcorn recalled for potential 
metal fragments. American Pop Com Co., of Sioux City, Iowa, issued a nationwide 
recall for three varieties of its Jolly Time Microwave popcorn because it may be 
contaminated with stainless steel metal fragments. 

Source: http://www.foodsafetynews.com/2014/05/microwave-popcom-recalled-for- 
potential-metal-fragments 

13. May 7, Food Safety News - (Pennsylvania) PA Red Robin employee diagnosed with 
hepatitis A. The Pennsylvania Department of Health is investigating after an employee 
at a Red Robin restaurant in Bartonsville was diagnosed with hepatitis A. The 
employee cannot return to work until granted medical clearance and has not been inside 
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the restaurant since April 27. 

Source: http://www.foodsafetvnews.com/2014/05/pa-red-robin-employee-diagnosed- 
with-hepatitis-a 
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Water and Wastewater Systems Sector 

14. May 8, Muncie Star Press - (Indiana) Muncie to get 1.25 million gallon water tank. 
Construction at Indiana American Water Company’s water treatment plant in Muncie 
began May 7 to install a 1.25 million gallon clearwell tank to increase system reliability 
and improve capacity and efficiency for more than 75,000 customers. The company has 
also committed funds to add improvements to the Prairie Creek Reservoir dam and to 
replace four ground water wells. 

Source: http://www.thestarpress.com/article/20140508/NEWS01/305080Q35/Muncie- 
water 



15. May 7, WCNC 36 Charlotte - (North Carolina) Wastewater spill prompts no swim 
advisory at Mt. Island Lake. A Charlotte-Mecklenburg Storm Water Services 
representative issued a no-swim advisory May 6 after approximately 5,500 gallons of 
wastewater overflowed from a manhole and reached Nance Cove on Mountain Island 
Lake. City officials will lift the advisory after tests prove the water is safe to swim in 
again. 

Source: http://www.wcnc.com/news/local/Wastewater-spill-prompts-no-swim- 
advisory-at-Mt-Island-Lake-2583 1798 1 .html 



For additional stories, see items 1 and 24 
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Healthcare and Public Health Sector 

16. May 8, Boulder Daily Camera - (Colorado) Boulder Community Health 
investigating stolen patient records for 3rd time since 2008. Up to 334 Boulder 
Community Health patients were notified May 7 by the hospital that their personal 
medical records may have been accessed after the hospital learned that least 9 patients 
had copies of their personal medical records stolen either from inside or near the 
hospital’s Foothills campus, then mailed to them by an anonymous source. The hospital 
is working with authorities to conduct a full investigation. 

Source: http://www.dailycamera.com/news/boulder/ci 25719824/boulder-community- 
health-investigating-stolen-patient-records-3rd 

17. May 7, Associated Press - (New York) Top NYC hospital pays $4.8M settlement 
after regulators say patient data wound up online. New York-Presbyterian Hospital 
and Columbia University Medical Center paid $4.8 million in a joint settlement with 
the U.S. Department of Health and Human Services May 7 for a 2010 privacy breach 
when Internet search engines were able to access health records of about 6,800 patients 
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after a medical center physician deactivated a server on the hospital’s internal data 
network. 

Source: 

http://www.therepublic.com/view/story/4c877b3a20b6409dbc8cl060841d3a38/NY— 

HIPAA-SETTLEMENT 
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Government Facilities Sector 

18. May 8, Kansas First News - (Kansas) Water main break closes USD 321 schools. 
Officials cancelled all classes in the USD 321 District May 8 due to a water main 
breach at Rossville grade school in Kansas. Repairs were underway on the water main. 
Source: http://kansasfirstnews.com/2014/05/08/water-main-break-closes-usd-321- 
schools/ 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

19. May 8, Help Net Security - (International) Malware peddlers prefer deceptive tactics 
to exploits. Microsoft released its latest Security Intelligence Report which found that 
attackers are concentrating on using deceptive downloads and ransomware rather than 
exploits for most attacks. The report noted that the Sefnit, Brantall, and Rotbrow 
families of malware were responsible for a large amount of deceptive malware attacks, 
among other findings. 

Source: http://www.net-securitv.org/malware news.php?id=2763 

20. May 8, Softpedia - (International) Koler Android ransomware targets users in 31 
countries. Bitdefender researchers identified a new piece of ransomware dubbed 
Android.Trojan.Koler.A that is served either through a fake Android app or the Angler 
exploit kit. The ransomware targets users in 31 countries and displays fake law 
enforcement messages matched to the country when demanding a ransom. 

Source: http://news.softpedia.com/news/Koler-Android-Ransomware-Targets-Users-in- 
31-Countries-441107.shtml 

21. May 8, Softpedia - (International) Ground(ctrl) advises customers to change 
passwords following hack attack. Web site operator Ground(ctrl) notified customers 
and authorities after attackers breached the company’s systems and were able to obtain 
email addresses, passwords, and the expiration dates and last four digits of payment 
cards. The company advised customers to change their passwords. 



- 6 - 



Source: http://news.softpedia.com/news/Ground-crtl-Advises-Customers-to-Change- 
Passwords-Following-Hack-Attack-441200.shtml 

22. May 7, SC Magazine - (International) iOS 7.1 flaw lets hacker access contacts book. 
A programmer demonstrated that the Siri voice assistant on an iPhone running iOS 7.1 
can be used to display a phone’s full list of contacts while locked and password 
protected. 

Source: http://www.scmagazineuk.com/ios-71-flaw-lets-hacker-access-contacts- 
book/article/345889/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

23. May 8, Bradford Era - (Pennsylvania) Phone, internet service restored after Verizon 
outage. About 2,950 Verizon Communication customers across several counties in 
Pennsylvania lost phone line service May 6 for less than 18 hours after 4 modules 
experienced malfunctions at Verizon’s network facility in Bradford. The company is 
investigating the cause of the outage. 

Source: http://www.bradfordera.com/news/article aaf5b01c-d65e-lle3-9824- 
0019bb2963f4.html 
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Commercial Facilities Sector 

24. May 8, WTTG 5 Washington, D.C. - (Washington, D.C.) Water main break expected 
to be repaired by later this afternoon. About 150 residents from roughly 18 
apartment buildings in southeast Washington, D.C. lost water service for several hours 
after a 20-inch water main failed May 7. District of Columbia Water and Sewer 
Authority crews worked to repair the break and officials stated that service should be 
restored May 8. 

Source: http://www.mvfoxdc.com/storv/25462377/water-main-repair-in-se-to-disrupt- 
service-some-delays-expected 

25. May 8, Associated Press - (Massachusetts) Woman jumps from balcony during 
Haverhill fire. Nearly 50 residents were displaced and 16 units were damaged in a 3- 
alarm fire that broke out at the Forest Acres apartment complex in Haverhill May 7. 
One adult and one child were transported to an area hospital for treatment. 

Source: 
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http://bostonherald.com/news opinion/local coverage/20 14/05/woman jumps from b 
alcony during haverhill fire 

26. May 7, KPIX 5 San Francisco - (California) Investigators report San Francisco 
Mission Bay fire was accidental, likely caused by welding. Fire officials released an 
investigative report May 6 on a March 1 1 fire that caused over $40 million in damages 
to an apartment building under-construction in San Francisco, and deemed the fire 
accidental after an event involving a wire welding unit or grinder at the site. The 
unfinished building was demolished after the blaze. 

Source: http://sanfrancisco.cbslocal.com/2014/05/07/investigators-report-san-francisco- 
mission-bav-fire-at-mb360-development-was-accidental-likelv-caused-by- welding/ 

27. May 6, U.S. Department of Labor - (Delaware) Dollar Tree fined $143,000 by US 
Department of Labor's OSHA for willfully exposing workers to serious safety 
hazards. The Occupational Safety and Health Administration cited Dollar Tree Stores 
for three safety violations, including two willful violations, following an October 2013 
inspection of its Wilmington, Delaware, store that was initiated in response to a 
complaint. Proposed fines total $143,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25956 
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Dams Sector 



See item 14 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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